PatchTheCVEo2oa vulnerabilities and fixes
Recent CVEs affecting o2oa, with upgrade or downgrade steps. 23 tracked.
o2oa has 23 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 20. Most recent: 2026-02-07. Highest priority: CVE-2024-37777 (score 47/100).
- CVE-2025-9680 LOW 3.5 UPGRADE A vulnerability was detected in O2OA up to 10.0-410
- CVE-2025-9681 LOW 3.5 UPGRADE A flaw has been found in O2OA up to 10.0-410
- CVE-2025-9682 LOW 3.5 UPGRADE A vulnerability has been found in O2OA up to 10.0-410
- CVE-2025-9683 LOW 3.5 UPGRADE A vulnerability was found in O2OA up to 10.0-410
- CVE-2025-9715 LOW 3.5 UPGRADE A vulnerability was found in O2OA up to 10.0-410
- CVE-2025-9718 LOW 3.5 UPGRADE A security flaw has been discovered in O2OA up to 10.0-410
- CVE-2025-9734 LOW 3.5 UPGRADE A security flaw has been discovered in O2OA up to 10.0-410
- CVE-2025-9736 LOW 3.5 UPGRADE A security vulnerability has been detected in O2OA up to 10.0-410
- CVE-2025-9737 LOW 3.5 UPGRADE A vulnerability was detected in O2OA up to 10.0-410
- CVE-2025-9716 LOW 3.5 UPGRADE A vulnerability was determined in O2OA up to 10.0-410
- CVE-2025-9646 LOW 3.5 UPGRADE A security flaw has been discovered in O2OA up to 10.0-410
- CVE-2025-9655 LOW 3.5 UPGRADE A weakness has been identified in O2OA up to 10.0-410
- CVE-2025-9657 LOW 3.5 UPGRADE A vulnerability was detected in O2OA up to 10.0-410
- CVE-2025-9658 LOW 3.5 UPGRADE A flaw has been found in O2OA up to 10.0-410
- CVE-2025-9659 LOW 3.5 UPGRADE A vulnerability has been found in O2OA up to 10.0-410
- CVE-2025-9717 LOW 3.5 UPGRADE A vulnerability was identified in O2OA up to 10.0-410
- CVE-2025-9719 LOW 3.5 UPGRADE A weakness has been identified in O2OA up to 10.0-410
- CVE-2025-9735 LOW 3.5 UPGRADE A weakness has been identified in O2OA up to 10.0-410
- CVE-2026-2074 MEDIUM 6.3 UPGRADE A vulnerability was identified in O2OA up to 9.0.0
- CVE-2025-22994 MEDIUM 6.1 DOWNGRADE O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.
- CVE-2024-3689 LOW 3.7 UPGRADE A vulnerability classified as problematic has been found in Zhejiang Land Zongheng Network Technology O2OA up
- CVE-2024-37777 HIGH 8.8 DOWNGRADE O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() functio
- CVE-2024-35591 MEDIUM 5.4 MITIGATE An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading
FAQ
How do I fix o2oa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is o2oa being exploited right now?
None of the tracked o2oa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which o2oa CVE should I patch first?
CVE-2024-37777 currently ranks highest (47/100): O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() functio.